Analyse forensique

Téléversez une image pour détecter d’éventuelles données cachées par analyse de stéganographie LSB (bit de poids faible). Analyse les modifications au niveau des pixels, affiche une carte thermique des pixels altérés, détecte les anomalies statistiques et extrait les messages texte cachés le cas échéant. Compatible avec l’encodage LSB standard et le format d’en-tête STEG. Tout le traitement se fait localement dans votre navigateur - Détecteur de stéganographie en ligne gratuit, sans inscription.

Téléversez n’importe quelle image pour voir une répartition binaire détaillée de ce qui constitue sa taille - données de pixels, surcoût de compression, métadonnées (EXIF/IPTC/XMP), profils de couleur (ICC) et en-têtes structurels. Recevez des conseils d’optimisation priorisés avec économies estimées pour le web, les applications mobiles et le stockage. Prend en charge JPEG, PNG, GIF, WebP, BMP, TIFF, AVIF et HEIC - tout est traité localement dans votre navigateur, sans envoi serveur. Analyseur de taille d’images en ligne gratuit.

Téléversez n’importe quel fichier pour détecter instantanément son type réel en lisant les octets magiques (signature/en-tête du fichier). L’outil ignore les extensions incorrectes et révèle le vrai format. Affiche un vidage hexadécimal avec les octets de signature surlignés, l’interprétation ASCII, le type MIME, la catégorie et l’analyse de correspondance d’extensions. Prend en charge plus de 120 signatures dans 16 catégories : images, audio, vidéo, documents, archives, exécutables, polices, certificats, images disque et plus. Tout est traité localement dans votre navigateur - Détecteur d’octets magiques en ligne gratuit, sans inscription.

Détectez les falsifications par copier-déplacer dans les images par correspondance de blocs de pixels. Téléversez une image pour trouver les zones clonées/copiées, voir des superpositions de carte thermique indiquant l’emplacement et l’intensité des clones, et obtenir des scores de confiance avec détails par région. Trois niveaux de sensibilité pour différents besoins de détection. Traitement 100 % privé dans le navigateur - Détecteur de clones d’images en ligne gratuit.

Extrayez les informations de copyright et de métadonnées des images. Téléversez une image pour lire les tags EXIF de copyright incorporés (Artist, Copyright, ImageDescription), les champs IPTC (CopyrightNotice, ByLine, Credit, Source, UsageTerms, Contact) et les blocs de texte PNG. Obtenez un score de complétude du copyright, une classification du statut des droits et un rapport détaillé de tous les champs détectés - Vérificateur de copyright d’images en ligne gratuit.

Détectez la profondeur de couleurs de n’importe quelle image - 1 bit, 8 bits, 24 bits, 32 bits, 48 bits et au-delà. Téléversez une image pour analyser les données de pixels, détecter les bits par canal, identifier l’espace colorimétrique, vérifier les profils ICC incorporés et obtenir un rapport technique détaillé. Tout se fait localement dans votre navigateur - Vérificateur de profondeur de couleurs en ligne gratuit, sans inscription.

Analyze noise patterns in images to check whether they were shot at high ISO, heavily processed, or carry synthetic-looking noise (a hint, not proof, of AI generation). See per-channel noise levels, noise histograms and a false-color heatmap.

Scan any file for embedded content - images, documents, archives, audio, video, executables, and fonts hidden inside. Upload any file and instantly detect 40+ file formats using binary signature (magic byte) analysis. Get results organized by category with exact byte offsets, size estimates, confidence indicators.

Extract and analyze embedded timestamps from photos - Date Taken, Date Digitized, and Date Modified. Upload any image to read EXIF timestamp metadata, detect chronological anomalies (future dates, out-of-order timestamps, identical dates), and identify software editing traces. All processing is local in your browser.

Check if a file extension matches its actual content type using magic bytes (file signature) detection. Upload any file to read the first bytes, match against 60+ known file signatures, and instantly determine if the file is what it claims to be. Detects disguised files commonly used in phishing attacks - all.

Generate MD5 and SHA256 SSH key fingerprints from SSH public keys. Paste your SSH public key in OpenSSH or PEM format to instantly get its MD5 (colon-separated hex) and SHA256 (Base64) fingerprints. Supports RSA, ECDSA, Ed25519, and DSA key types with automatic key type and key length detection. Handles multi-key.

Identify container file formats (ZIP, RAR, 7z, ISO, OLE, Ogg, MKV, PDF) and list their contents without extracting. Upload any file to detect its container format by magic bytes, list internal file names and sizes for ZIP-based formats (including DOCX, XLSX, PPTX, JAR, APK, EPUB), extract PDF metadata and page count.

Upload multiple files to detect their true file types by reading magic bytes (file signatures). Supports 65+ formats including images, documents, archives, audio, video, fonts, and executables. Highlights extension mismatches for security audits and forensic analysis -

Upload any binary file and search for specific byte patterns using hex notation (FF D8 FF, with ?? wildcards), text strings, or regular expressions. Scans every byte to find all occurrences with exact offset, hex/ASCII representation, and surrounding context. Configurable context size, case sensitivity, and max.

Upload any file to read and interpret its footer/trailer bytes - the closing signatures that mark the end of a file format. Complementary to magic bytes (headers), trailers are essential for understanding file structure boundaries, detecting truncated files, verifying file completeness, and forensic analysis.

Upload any file to check if it has been truncated (cut short) - detects incomplete downloads, failed exports, and corrupted transfers by analyzing file headers and comparing expected end-of-file markers with actual file size. Supports JPEG (EOI FF D9 marker), PNG (IEND chunk with dimension-based estimation), GIF.

Upload Office documents (DOCX, XLSX, PPTX) to detect hidden content including hidden worksheets, hidden slides, hidden text, tracked changes, comments, VBA macros, and hidden rows or columns. Each finding is categorized with risk levels - all processing is local in your browser.

Analyze chunk-based file formats (PNG, RIFF/WAV/AVI/WebP, JPEG, GIF) and list all chunks with type, size, offset, CRC-32 checksums, and parsed field-level data. All processing is local in your browser - free online File Chunk Analyzer, no signup required.

Upload any file to view and interpret its binary header bytes. Shows hex dump, ASCII interpretation, and a field-by-field breakdown with plain-English explanations for PNG, JPEG, PDF, ZIP, GIF, BMP, ELF, and other formats. Displays offset, length, hex value, and interpreted values for each header field.

Upload any archive file (ZIP, RAR, 7z, TAR, GZ, BZ2, XZ) for detailed structural analysis. Shows compression methods, encryption type (AES-256, PKWARE), file count, total compressed/uncompressed sizes, compression ratio, file type distribution, and per-file details for ZIP archives.

Upload any file to detect and analyze padding bytes - extra bytes added for alignment, header filling, or sector padding. Finds runs of identical bytes, classifies by type (null, space, 0xFF, debug values), shows distribution map, and calculates padding percentage.

Upload any file to check if it is password-protected or encrypted. Instantly detects encryption on PDFs (/Encrypt flag, AES-256 vs RC4), Office documents (DOCX/XLSX/PPTX with EncryptionInfo), ZIP archives (PKWARE encryption flags), and RAR archives (encryption headers). Shows the encryption type, algorithm strength.

Upload any file to scan for suspicious patterns commonly used in malware: double extension masquerading (document.pdf.exe), Unicode bidirectional override characters (U+202E RTL override that disguise file types), zero-width invisible characters, high-entropy encrypted/packed payloads, and hidden data appended after.

Extract all embedded images from Office documents and PDFs. Upload Word (.docx), Excel (.xlsx), PowerPoint (.pptx), or PDF files to extract images stored in media folders and PDF object streams. View a gallery with preview thumbnails, dimensions, formats, and sizes. Download individual images or all images as a ZIP.

Upload a .docx, .xlsx, or .pptx file to extract all embedded metadata - author, created/modified dates, company, revision history, comments, hidden text, custom properties, font lists, and more. Parses the Open XML structure to read core properties (dc, dcterms), document statistics, application settings.

Upload two Office documents (DOCX, XLSX, PPTX) to compare their metadata side by side. Extracts and compares all embedded metadata - author information, creation and modification dates, revision history, document statistics, company details, application version, and custom properties. Each field is categorized.

Upload any PDF to extract all embedded metadata - author, title, subject, keywords, creator, producer, creation/modification dates, and PDF version. Extracts both the Document Info Dictionary and XMP metadata (Dublin Core, Adobe XMP). Fields organized by source group with per-field descriptions, tab-based filtering.

Upload any file to simulate file carving - recovery of embedded files by scanning for known headers (magic bytes) and footers (trailer signatures). Detects 13 file formats including JPEG, PNG, GIF, BMP, PDF, ZIP, RAR, GZIP, ELF, MP3, RIFF, OLE2, and SQLite. Shows each carved fragment with exact byte offset, estimated.

Upload any file to check if its size is unusual compared to typical files of the same type. Detects suspiciously small or large files that may indicate corruption, tampering, hidden embedded content, or padding added by malware. Uses magic bytes to detect the true file format even if the extension has been changed.

Upload a damaged file to detect its file type from remaining data and suggest a correct header to prepend for recovery. Analyzes magic bytes at various offsets, entropy patterns, and byte frequency distributions to identify the original format even when the header is corrupted or missing. Supports JPEG, PNG, GIF.

Upload any binary file (executables, firmware, disk images, ROMs) to extract all embedded printable strings - URLs, file paths, identifiers, code snippets, and readable text. Configurable minimum length from 2-20 characters, ASCII and Unicode support, smart categorization (URLs, Paths, IDs, Code, Data, Text)

Upload any file fragment (a piece of a file without its header) to identify its likely file type using statistical byte pattern analysis. Computes a comprehensive byte profile including Shannon entropy, byte frequency distribution, printable ASCII percentage, zero-byte density, and internal marker detection.

Upload Office documents (DOCX, XLSX, PPTX) or PDF files to extract all embedded URLs. Parses the internal document structure to find every external link - hyperlinks, href attributes, and bare URLs in text. Shows each URL with its location within the document, a context snippet, protocol (HTTPS/HTTP), and extracted.

Upload Office documents (DOCX, XLSX, PPTX) or PDF files to scan for embedded URLs. Extracts all external links and checks them against a comprehensive local database of 40+ phishing indicators - suspicious TLDs, lookalike domains, credential harvesting keywords, URL obfuscation, protocol anomalies, IP address URLs.

Upload any compressed or archived file to instantly identify which compression algorithm was used - DEFLATE (zlib/gzip), LZMA/XZ, BZIP2, Zstandard (ZSTD), Brotli, LZ4, Snappy, LZW, RLE, Huffman Coding, and more. Reads binary header bytes and matches against a database of 30+ compression-specific signatures.

Check if a signed file's digital certificate is valid. Paste PEM-encoded certificates, PKCS7 signed data, or upload a signed file (.cer, .crt, .p7b, .exe, .dll) to extract full X.509 certificate details - subject and issuer, validity dates, serial number, SHA-1/SHA-256 thumbprints, key usage, extended key usage.

Upload any file to calculate a comprehensive security risk score (0-100) based on file type, embedded content, macros, scripts, URL links, entropy, metadata anomalies, and extension mismatches. Each risk factor is analyzed independently and weighted to produce a final severity rating.

Upload any file to scan for personally identifiable information (PII) that could reveal file origin - detects email addresses, phone numbers, GPS coordinates, IP addresses, computer names, file paths (Windows/Unix), usernames, SSNs, URLs with credentials, and document metadata (author, company). Each finding.

Upload any file to validate its internal structure - checks headers, markers, chunks, CRC checksums, and structural integrity for JPEG, PNG, PDF, ZIP, MP3, and MP4 formats. Each format-specific check reports field-level issues with exact byte offset, severity rating, and actionable recovery recommendations.

Upload multiple files at once to check which ones are zero bytes (empty files with 0 size). Detects completely empty files, files containing only whitespace or null bytes (effectively empty), and provides batch statistics. Shows a clean results table with file name, size, type icon, detection status, and individual.

Upload any file to detect embedded JavaScript code across PDFs, Office documents (DOCX, XLSX, PPTX), HTML, SVG, XML, and any file format. Detects PDF /JavaScript references and /OpenAction auto-execute triggers, Office VBA macros and script elements in XML, HTML/SVG inline scripts and event handlers.

Upload two directory listings (as text or from archives) to compare their file structure side by side. Parses directory listings and archive contents to detect files added, removed, changed, and unchanged between the two input sets. Results are organized into clearly categorized tables with file sizes, status badges.

Upload any file to estimate whether deleted data might still be recoverable. Analyzes file slack space, overwrite patterns, byte frequency distributions (vs known pristine patterns), embedded remnant detection (old strings, paths, residues), and sector-level analysis. Provides an overall recovery potential score.

Upload multiple files to compare their sizes with a visual bar chart. Instantly identify the largest and smallest files in a set. Shows total size, average size, median size, and size distribution. Sort by name or size. All processing runs locally in your browser - free online File Size Comparator, no signup required.

Upload a before/after set of files to detect all changes: added files, removed files, modified files, and unchanged files. Compares filenames and SHA-256 content hashes for accurate modification detection. Results include a visual summary dashboard with counts, size totals, bar chart overview, and detailed per-file.

Find files that are similar but not identical using fuzzy hashing (ssdeep-like algorithm). Upload multiple files to compare them with content-based chunking and rolling hash analysis. Get similarity scores from 0% to 100% organized by category - Identical, Near-Duplicate, Similar, Somewhat Similar, and Different.

Upload multiple files to see a breakdown of file types in the set. Interactive pie chart visualization of categories, MIME types, and extensions with magic byte detection. Identifies 80+ file formats across images, documents, archives, audio, video, executables, fonts, and certificates. Per-file details.

Compare two versions of the same file to see what changed - file name, size, extension, last modified date, and SHA-256 content hash. Upload any two files for instant side-by-side comparison with clear match/difference indicators for each attribute. The tool computes a cryptographic hash using the Web Crypto API.

Upload multiple files to detect naming patterns including sequential numbering, date patterns, common prefixes, suffixes, consistent separators, and file extension distributions. Each pattern is scored with a confidence rating (0-100%). View detected patterns, file groups by common naming elements, and suggested.

Upload any file to view all its file system attributes - file name, size, MIME type, timestamps, permissions, magic bytes, content classification, character encoding, and Shannon entropy. Displays basic attributes (name, size, type, extension), temporal data (last modified timestamp), format detection via magic bytes.

Upload any file to verify that its magic bytes match its extension and check for header-level corruption. Deep header validation for JPEG, PNG, PDF, ZIP, EXE, ELF, and more. Supports 120+ file signatures across 16 categories. Quick integrity triage tool - all processing is local in your browser, no signup required.

Upload a completely unknown file (no extension or unrecognized format) and instantly identify its true file type by reading the magic bytes. Shows the likely file format, MIME type, common applications that use it, typical use cases, and extension suggestions. Supports 200+ file signatures across images, audio.

Free online Document Metadata Remover. Upload DOCX, XLSX, or PPTX files to instantly strip all personal metadata - author name, last modified by, company, revision history, creation/modification dates, and more. Removes metadata from document properties (docProps/core.xml and docProps/app.xml), comments, and revision.

Free File Extension Lookup online. Search any file extension (.pdf, .jpg, .docx, .zip) to see its full format name, MIME type, magic bytes, associated programs, and typical usage. Browse by category - images, documents, audio, video, archives, and more. No signup required.